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Challenges for LEAs 



■j Facts 

■ Exponential Growth of Throughput 

■ Emergence of 40 Gbps interfaces 

■ Greater number of interceptions 

■ More details needed to investigate means 

more data to process ■ 



■j Consequence 

■ Higher complexity of technical 
implementation 

■ Higher cost 

■ Lower efficiency of analysts flooded by 
data 
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Simplistic approach not sustainable 



Global Mobile Data Traffic by Application Category (TB per Month) 
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Source: Cisco VNI Mobile, 2011 



■j QOSMOS 



Can budgets follow 
the same track? 
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Simplistic approach not sustainable 



■j Simplistic approach 

■ Horizontal scaling: Multiply serveurs as fast as traffic increases 

■ To find targets in the growing volume of traffic 

■j Impact of the simplistic approach 

■ Multiply processing costs 

■ Multiply storage costs 

■ Makes investigation more complex and slower because more data needs to be 
analysed by Agents 
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Good News: 90% of the growth is composed of non-relevant 
traffic 

Global Mobile Data Traffic by Application Category (TB per Month) 



■ Video is booming 




■ Email + webmail + Instant 
Messaging + VoIP is 
stable with less than 2% 
of the traffic 



Non-relevant (> 90%) 



2010 2011 2012 2013 2014 2015 

Source: Cisco VNI Mobile, 2011 
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A Selective Approach for Interception Is Required 



■j Focus processing capacity on relevant traffic category 

■ Not all traffic is relevant for packet inspection 

■ Video and entertainsment 

■ Games 

■ Triggers are usually set on very specific traffic categories 

■ Email 

■ Do you send more emails because your connection is upgraded from 1 0 Mbps to 1 00 Mbps? 
. VoIP 

■ Authentication 

■ These protocols generates stable traffic volumes 



■j Focus processing capacity on relevant packets 

■ In a session, only a small amount of packets contain relevant information 

■ Email, webmail, IM, VoIP, authentication, SMS, MMS account for 2% of the 
traffic 

■ Many packets are even empty! 
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Q&A 
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